Managers should only add lower roles

Hotfix caused managers to be able to also add (and remove) teachers. This should be fixed.